The engineer will support the deployment, migration, cutover, consolidation, and optimization of Fortinet solutions within a multi-region AWS environment. The role will focus on FortiGate virtual machines, FortiManager, FortiAnalyzer, AWS networking, and migration from existing Cisco FTD and AWS Network Firewall infrastructure.
Responsibilities:
- Build and configure FortiManager (FMG) virtual machines.
- Build and configure FortiAnalyzer (FAZ) virtual machines.
- Provision and cut over FortiGate virtual machines within an Inspection VPC.
- Support AWS inspection cutover across six regions migrating to Fortinet.
- Decommission 12 AWS Network Firewalls.
- Provision and cut over a Central Security VPC to Fortinet.
- Migrate and consolidate 21 Cisco FTD firewalls to Fortinet.
- Support FTD migration and consolidation onto the Fortinet platform.
- Access, configure, and enable optimized security policies.
Qualifications:
- Hands‑on experience with AWS networking services and architectures, including:
- Transit Gateway (TGW)
- AWS Network Firewall
- Subnet and TGW route table associations and propagations
- Multi‑regional architectures
- AWS CloudFormation
- Graviton‑and AMD‑based instance types
- Strong experience implementing and supporting FortiGate in AWS environments.
- Experience with firewall migration, cutover, consolidation, and decommissioning activities.
- Ability to support complex cloud‑network and security changes in a multi‑region AWS environment.
Tools and Technologies:
- Fortinet FortiGate
- Amazon Web Services (AWS)
- AWS VPC, TGW, and GWLB
- AWS Network Firewall
- AWS CloudFormation
- Terraform
Preferred Qualifications:
- Experience deploying Active/Passive and Active/Active FortiGate architectures in AWS, including an understanding of the feature constraints that influence architecture selection.
- Experience deploying FortiManager and FortiAnalyzer in AWS.